Data Breach Reveals 100k IEEE.org Members' Plaintext Passwords

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by e2e8 on Tuesday September 25, 2012 @02:47PM (#4571976)

Of course a salt will not make a single password harder to attack. A salt will however force you to attack passwords "one at a time" by making precomputed hashes useless.

[ Parent | on HN ]

Re:Data Breach Reveals 100k IEEE.org Members' Plaintext Pass... by nathan_long on Tuesday September 25, 2012 @05:34PM (#4572791)

Yes, but you can attack them one at a time at astonishing speed these days.

Which is why you need to not use a hashing algorithm designed to be fast, like SHA, but one designed to be slow, like bcrypt.

[ Parent | on HN ]